Critical vulnerability detected in Atlassians Confluence

Australian Atlassian now warns that a critical vulnerability has been detected in their Confluence tool and that it is being actively used for attacks, reports The Register.

The lack of security will affect Conluence all the way back to version 1.3.5 which was released in 2013.

There is currently no patched version of either Confluence Server or Confluence Data Center. Atlassian writes that it is the company’s top priority to produce these.

Affected users are encouraged to restrict or disable Internet access for Confluence.

Also read: Critical vulnerability affects millions of Android phones

–